$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2DDD/B4A283629E1B11E98E1E4E5EC4F9AE02/h81xgndjHgvdtrTzot8esxEio4E.mft File: h81xgndjHgvdtrTzot8esxEio4E.mft (raw, json) Hash identifier: 1KPFLICGdclTIjkHOG3d/YKxfuBmfvdlY5H9zexUa4U= Subject key identifier: A4:8E:D6:0F:B7:AE:B4:09:ED:97:03:44:C4:BD:B3:D0:AC:C5:FF:34 Authority key identifier: 87:CD:71:82:77:63:1E:0B:DD:B6:B4:F3:A2:DF:1E:B3:11:22:A3:81 Certificate issuer: /CN=A91F2DDD/serialNumber=87CD718277631E0BDDB6B4F3A2DF1EB31122A381 Certificate serial: 0E63 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h81xgndjHgvdtrTzot8esxEio4E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F2DDD/B4A283629E1B11E98E1E4E5EC4F9AE02/h81xgndjHgvdtrTzot8esxEio4E.mft Manifest number: 117A Signing time: Wed 02 Jul 2025 17:56:40 +0000 Manifest this update: Wed 02 Jul 2025 17:56:39 +0000 Manifest next update: Wed 09 Jul 2025 17:56:39 +0000 Files and hashes: 1: h81xgndjHgvdtrTzot8esxEio4E.crl (hash: pE8wGLM02oqf+hbtT5FiPTilluhx9UkgSpV6WF0XtTI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F2DDD/B4A283629E1B11E98E1E4E5EC4F9AE02/h81xgndjHgvdtrTzot8esxEio4E.crl rsync://rpki.apnic.net/member_repository/A91F2DDD/B4A283629E1B11E98E1E4E5EC4F9AE02/h81xgndjHgvdtrTzot8esxEio4E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h81xgndjHgvdtrTzot8esxEio4E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 17:56:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3683 (0xe63) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F2DDD, serialNumber=87CD718277631E0BDDB6B4F3A2DF1EB31122A381 Validity Not Before: Jul 2 17:56:39 2025 GMT Not After : Jul 9 17:56:39 2025 GMT Subject: CN=686572d7-7dde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:9d:1b:c8:73:d7:59:f1:d5:4c:12:74:c5:be: 7e:ca:04:d5:00:23:81:5f:83:2e:fc:cb:a8:ae:ea: 48:f5:bd:6a:e3:39:a4:bd:83:2c:59:57:37:c2:3a: 86:a2:a5:c6:72:0e:78:84:8f:ff:9d:1d:5e:29:06: bf:75:7d:68:ec:08:9c:75:e8:43:96:cc:72:01:42: af:a9:6a:96:44:ca:85:7a:4a:70:e8:2b:d5:78:da: 82:ee:15:3a:28:03:4a:a9:10:58:eb:31:a2:2c:2a: b3:85:ab:33:e3:c5:e3:40:91:ec:2d:4b:2e:13:4d: 46:d4:13:84:e3:da:5c:41:2d:21:56:9d:4b:cd:cb: 4c:c7:df:fe:f1:88:b6:bf:43:89:d6:58:ec:32:a4: f1:4a:9c:89:33:a7:86:62:41:c6:7d:3b:ad:4a:a9: b5:26:16:16:5a:49:b7:4a:61:e4:f6:b5:ec:bd:b8: 4d:a8:8b:71:27:b9:76:1e:73:ee:d7:51:1d:8c:ed: 05:ef:04:dc:78:3b:ef:a1:69:dc:4d:9c:46:4a:d8: 5d:95:a6:b1:d9:31:20:c6:a4:6b:46:03:6e:1b:24: a8:b2:85:82:59:52:ac:8e:ef:47:af:13:e4:a1:74: cc:f4:16:4c:d5:bf:ce:0e:ab:ae:13:1a:cd:d6:62: e2:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:8E:D6:0F:B7:AE:B4:09:ED:97:03:44:C4:BD:B3:D0:AC:C5:FF:34 X509v3 Authority Key Identifier: keyid:87:CD:71:82:77:63:1E:0B:DD:B6:B4:F3:A2:DF:1E:B3:11:22:A3:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F2DDD/B4A283629E1B11E98E1E4E5EC4F9AE02/h81xgndjHgvdtrTzot8esxEio4E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h81xgndjHgvdtrTzot8esxEio4E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2DDD/B4A283629E1B11E98E1E4E5EC4F9AE02/h81xgndjHgvdtrTzot8esxEio4E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:65:b8:73:d8:3c:3a:07:56:36:94:33:50:79:a3:e9:b7:79: 2e:49:86:90:3c:5f:c3:39:5d:7a:a2:61:cf:c8:48:86:8a:a9: 4f:6c:bc:86:ea:24:71:65:08:c0:1b:8b:ee:32:ad:50:5b:f2: 46:13:85:fa:f9:d6:4d:dc:de:f1:86:e1:d6:13:df:44:f3:61: bb:49:42:1a:ee:ea:ac:62:13:21:ba:ce:ae:55:f5:47:3a:ef: 0b:6e:cf:8f:83:5d:e2:c1:50:ae:88:1c:f4:cb:46:8f:8b:00: 2c:93:da:7c:42:a3:9f:0c:82:fd:b4:40:f1:4b:67:24:44:16: c2:8a:5f:ee:86:b2:da:e1:94:48:78:40:98:42:51:1b:ce:93: 24:25:a3:66:1b:49:02:18:af:ec:27:12:12:05:7b:7a:e2:c3: 6a:01:63:6c:d0:e4:5f:53:ba:8b:89:5d:1a:af:ae:05:3f:aa: 8a:f8:70:03:fa:6c:56:8b:77:f8:87:d7:17:fc:77:39:d1:be: 7e:6b:c8:58:ee:f6:cc:7d:fe:bc:6a:7a:91:4f:69:06:c3:0e: 14:be:f1:b7:c6:a3:77:9c:3d:b9:0f:65:d6:df:32:a8:a4:49: 90:1f:64:a7:b1:d7:a2:48:70:15:af:6c:d2:b2:1c:7d:e0:e1: e8:79:b4:4e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDmMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjJEREQxMTAvBgNVBAUTKDg3Q0Q3MTgyNzc2MzFFMEJEREI2QjRGM0EyREYxRUIz MTEyMkEzODEwHhcNMjUwNzAyMTc1NjM5WhcNMjUwNzA5MTc1NjM5WjAYMRYwFAYD VQQDEw02ODY1NzJkNy03ZGRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3p0byHPXWfHVTBJ0xb5+ygTVACOBX4Mu/MuorupI9b1q4zmkvYMsWVc3wjqG oqXGcg54hI//nR1eKQa/dX1o7AicdehDlsxyAUKvqWqWRMqFekpw6CvVeNqC7hU6 KANKqRBY6zGiLCqzhasz48XjQJHsLUsuE01G1BOE49pcQS0hVp1LzctMx9/+8Yi2 v0OJ1ljsMqTxSpyJM6eGYkHGfTutSqm1JhYWWkm3SmHk9rXsvbhNqItxJ7l2HnPu 11EdjO0F7wTceDvvoWncTZxGSthdlaax2TEgxqRrRgNuGySosoWCWVKsju9HrxPk oXTM9BZM1b/ODquuExrN1mLiawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKSO1g+3 rrQJ7ZcDRMS9s9Csxf80MB8GA1UdIwQYMBaAFIfNcYJ3Yx4L3ba086LfHrMRIqOB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMkRERC9CNEEyODM2MjlF MUIxMUU5OEUxRTRFNUVDNEY5QUUwMi9oODF4Z25kakhndmR0clR6b3Q4ZXN4RWlv NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2g4MXhnbmRqSGd2ZHRyVHpvdDhlc3hFaW80RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MkRERC9CNEEyODM2MjlFMUIxMUU5OEUxRTRFNUVDNEY5QUUwMi9oODF4Z25kakhn dmR0clR6b3Q4ZXN4RWlvNEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBlZbhz2Dw6B1Y2lDNQeaPpt3kuSYaQPF/DOV16omHPyEiGiqlPbLyG 6iRxZQjAG4vuMq1QW/JGE4X6+dZN3N7xhuHWE99E82G7SUIa7uqsYhMhus6uVfVH Ou8Lbs+Pg13iwVCuiBz0y0aPiwAsk9p8QqOfDIL9tEDxS2ckRBbCil/uhrLa4ZRI eECYQlEbzpMkJaNmG0kCGK/sJxISBXt64sNqAWNs0ORfU7qLiV0ar64FP6qK+HAD +mxWi3f4h9cX/Hc50b5+a8hY7vbMff68anqRT2kGww4UvvG3xqN3nD25D2XW3zKo pEmQH2SnsdeiSHAVr2zSshx94OHoebRO -----END CERTIFICATE-----Generated at Thu Jul 3 09:52:21 2025 by rpki-client